读取本地授权访问的加密及受保护文本、Word和Excel文件内容，支持企业安全策略环境下的合法文件读取。

This skill appears to be a simple local reader that extracts text from plain files and Office .docx/.xlsx packages; it does not contact external endpoints or request secrets. Before installing or using it: (1) be aware it does NOT bypass password protection or decrypt truly encrypted Office files—password-protected/encrypted .docx/.xlsx will likely fail; (2) its text reader always decodes as UTF-8 despite claims of automatic encoding detection—files in other encodings may error; (3) because it reads arbitrary local files, avoid running it against highly sensitive data unless you trust the environment and have inspected the code (which is short and uses only standard libs); (4) if you need decryption of protected files, look for explicit support for Office encryption/passwords or official APIs rather than relying on this tool. If you want higher assurance, verify the referenced GitHub repository and run the script in a controlled environment with non-sensitive test files first.

Type: OpenClaw Skill Name: encrypted-file-reader Version: 1.0.0 The skill is classified as **suspicious**. The `read_file.py` script, while ostensibly designed for reading various file types, includes a very extensive list of `TEXT_EXTENSIONS` that encompasses highly sensitive files such as `.env`, `.pem`, `.key`, `.crt`, `.ssh`, `.aws`, `.kubeconfig`, `.npmrc`, `.gitconfig`, `.bashrc`, `.history`, and many other configuration, credential, and log files. The script's primary function is to read the content of any specified local file and print it to standard output. While the skill's documentation (`SKILL.md`, `README.md`) explicitly states it "only reads local files the user has permission to access" and "does not bypass any legitimate file access control," the capability to read such a broad range of sensitive files, if invoked by an AI agent with elevated privileges or tricked by prompt injection, presents a significant data exfiltration risk. There is no explicit malicious intent (e.g., exfiltration to a remote server) within the code itself, but the broad file access capability makes it a high-risk vulnerability. ```json { "classification": "suspicious", "summary": "The `read_file.py` script is designed to read local file content and includes an extremely broad list of `TEXT_EXTENSIONS` that covers many sensitive file types (e.g., .env, .pem, .key, .ssh, .aws, .history). While the code itself does not contain explicit data exfiltration logic or malicious commands,